CVEs published August 10, 2025
36 CVEs were published on August 10, 2025: 0 critical, 5 high.
- Published
- 36
- Critical
- 0
- High
- 5
- Medium
- 30
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 13
Most affected products
- LitmusChaos Litmus
- 7
- Open5GS
- 7
- Linksys RE6250 · Linksys RE6300 +4
- 5
- atjiu pybbs
- 3
- Portabilis i-Diario
- 3
- Portabilis i-Educar
- 2
- xujeff tianti 天梯
- 2
- code-projects Online Medicine Guide
- 1
- code-projects Simple Art Gallery
- 1
- EMQX
- 1
High 5
- CVE-2025-8820Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 wirelessBasic stack-based overflowLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-8819Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setWan stack-based overflowLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-8817Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setLan stack-based overflowLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-8816Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setOpMode stack-based overflowLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-8810Tenda AC20 SetFirewallCfg strcpy stack-based overflowTenda AC20
Medium, low and unrated 31
- CVE-2025-8818Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setLan setDFSSetting os command injectionLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-8815猫宁i Morning Shiro Configuration index path traversal猫宁i Morning
- CVE-2025-8814atjiu pybbs CookieUtil.java setCookie cross-site request forgeryatjiu pybbs
- CVE-2025-8813atjiu pybbs IndexController.java changeLanguage redirectatjiu pybbs
- CVE-2025-8812atjiu pybbs Admin Panel settings cross site scriptingatjiu pybbs
- CVE-2025-8811code-projects Simple Art Gallery registration.php sql injectioncode-projects Simple Art Gallery
- CVE-2025-8809code-projects Online Medicine Guide addelidetails.php sql injectioncode-projects Online Medicine Guide
- CVE-2025-8808xujeff tianti 天梯 com.jeff.tianti.controller save exportOrder csv injectionxujeff tianti 天梯
- CVE-2025-8807xujeff tianti 天梯 save authorizationxujeff tianti 天梯
- CVE-2025-8806zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 treeData sql injectionzhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用…
- CVE-2025-8805Open5GS SMF gsm-sm.c smf_gsm_state_wait_pfcp_deletion denial of serviceOpen5GS
- CVE-2025-8804Open5GS AMF ngap_build_downlink_nas_transport assertionOpen5GS
- CVE-2025-8803Open5GS AMF gmm-sm.c gmm_state_exception denial of serviceOpen5GS
- CVE-2025-8802Open5GS SMF smf-sm.c smf_state_operational denial of serviceOpen5GS
- CVE-2025-8801Open5GS AMF gmm-sm.c gmm_state_exception denial of serviceOpen5GS
- CVE-2025-8800Open5GS AMF esm-handler.c esm_handle_pdn_connectivity_request denial of serviceOpen5GS
- CVE-2025-8799Open5GS AMF npcf-build.c amf_nsmf_pdusession_build_create_sm_context denial of serviceOpen5GS
- CVE-2025-8798oitcode samarium Create Product product unrestricted uploadoitcode samarium
- CVE-2025-8797LitmusChaos Litmus LocalStorage permissionLitmusChaos Litmus
- CVE-2025-8796LitmusChaos Litmus Delete Request delete_project authorizationLitmusChaos Litmus
- CVE-2025-8795LitmusChaos Litmus login access controlLitmusChaos Litmus
- CVE-2025-8794LitmusChaos Litmus LocalStorage authorizationLitmusChaos Litmus
- CVE-2025-8793LitmusChaos Litmus resource injectionLitmusChaos Litmus
- CVE-2025-8792LitmusChaos Litmus client-side enforcement of server-side securityLitmusChaos Litmus
- CVE-2025-8791LitmusChaos Litmus list_projects improper authorizationLitmusChaos Litmus
- CVE-2025-8790Portabilis i-Educar API Endpoint pessoa improper authorizationPortabilis i-Educar
- CVE-2025-8789Portabilis i-Educar API Endpoint Diario authorizationPortabilis i-Educar
- CVE-2025-8788Portabilis i-Diario Informações adicionais planos-de-aula-por-areas-de-conhecimento cross site scriptingPortabilis i-Diario
- CVE-2025-8787Portabilis i-Diario Registro das atividades registros-de-conteudos-por-disciplina cross site scriptingPortabilis i-Diario
- CVE-2025-8786Portabilis i-Diario Registro das atividades registros-de-conteudos-por-areas-de-conhecimento cross site scriptingPortabilis i-Diario
- CVE-2025-52136In EMQX before 5.8.6, administrators can install arbitrary novel plugins via the Dashboard web interface.EMQX